<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">You could get creative with subnet masks in left/right subnet and group them and send 64 towards one, 64 towards the second, using their route tables on the 200 machines.<div class=""><br class=""></div><div class="">EKG</div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Jan 16, 2017, at 3:29 PM, Scott Walker <<a href="mailto:scott.walker@framestore.com" class="">scott.walker@framestore.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><div class=""><div class=""><div class="">Fast.... I know not a wonderful answer.<br class=""><br class=""></div>The more throughput we can get the better. Right now I am pushing 440-470 Mbit/s thru 1 tunnel. Ideally I'd like to get 3-4 tunnels up.<br class=""><br class=""></div>The other end of the tunnel is going to ~200 compute nodes pulling/pushing data.<br class=""><br class=""></div>I'm just not sure on the specifics of multiple tunnels ummm bonded? (do you even bond them?)<br class=""></div><div class="gmail_extra"><br class=""><div class="gmail_quote">On 11 January 2017 at 20:55, Eric Germann <span dir="ltr" class=""><<a href="mailto:ekgermann@semperen.com" target="_blank" class="">ekgermann@semperen.com</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">What kind of throughput are you looking for?<br class="">
<br class="">
AES-GCM with HW that supports AESNI, we routinely get 300+Mbps<br class="">
<br class="">
EKG<br class="">
<div class=""><div class="h5"><br class="">
> On Jan 11, 2017, at 4:48 PM, Scott Walker <<a href="mailto:scott.walker@framestore.com" class="">scott.walker@framestore.com</a>> wrote:<br class="">
><br class="">
> I'm looking to build an infra that is<br class="">
><br class="">
><br class="">
> local site -> remote site<br class="">
><br class="">
> But using multiple tunnels in order to get the B/W I need. (plenty of servers at the remote end talking back so I want to be sure it's not all rammed down one tunnel).<br class="">
><br class="">
> Most of the docs I'm finding revolve around this type of config but for VPC (AWS, GCE, etc).<br class="">
><br class="">
> I do admit I'm a bit lost right now as to how I go about this approach.<br class="">
><br class="">
> So if I have say 3-4 servers on local site and 3-4 servers on remote dedicated as VPN end points.<br class="">
><br class="">
> Would I configure a 1-1 ratio? Create a mesh? How on local would I do routing? I'm not looking for HA this is for PURE speed reasons.<br class="">
><br class="">
> I'm reading everything I can find but I'm still in the dark.<br class="">
</div></div>> ______________________________<wbr class="">_________________<br class="">
> Users mailing list<br class="">
> <a href="mailto:Users@lists.strongswan.org" class="">Users@lists.strongswan.org</a><br class="">
> <a href="https://lists.strongswan.org/mailman/listinfo/users" rel="noreferrer" target="_blank" class="">https://lists.strongswan.org/<wbr class="">mailman/listinfo/users</a><br class="">
<br class="">
</blockquote></div><br class=""></div>
</div></blockquote></div><br class=""></div></body></html>